MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE Un PoC para CVE-2024-27956, una inyección SQL en el plugin ValvePress Automatic. Este PoC explota la vulnerabilidad creando un usuario en el objetivo y otorgando derechos de Administrador. Ser administrador en WordPress puede conducir a la ejecución remota de código. Uso...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage root@kitploit: git clone...

CVE-2024-27956-RCE

CVE-2024-27956-RCE Un PoC para CVE-2024-27956, una inyección SQL en el plugin ValvePress Automatic. Este PoC explota la vulnerabilidad creando un usuario en el objetivo y otorgándole derechos de Administrador. Ser administrador en WordPress puede conducir a la Ejecución Remota de Código. Uso...

EUVD-2024-30480

Malicious code in bioql PyPI...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

Exploit for SQL Injection in Valvepress Automatic

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

VulnCheck KEV: CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic through 3.92.0...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

CVE-2024-32693

CVE-2024-32693 is a CSRF vulnerability in the WordPress WordPress Automatic Plugin (ValvePress Automatic) affecting versions prior to 3.93.0. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L with a base score of 7.6 (HIGH). Impact: confidentiality is Low, integrity is High, ava...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Summary of CVE-2024-27956 (WordPress WP Automatic SQLi) : The WP Automatic plugin (WordPress) is vulnerable to unauthenticated SQL Injection, affecting versions up to 3.92.0 (and variants noting patch to 3.92.1). The underlying issue is insufficient input handling in the plugin’s SQL queries, ena...

PT-2024-3159

Name of the Vulnerable Software and Affected Versions ValvePress Automatic versions prior to 3.92.1 Description The issue is related to an SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands. This can lead to site takeovers and malicious activities. The vulnerabili...